Journalctl

Follow logs live

sudo journalctl -u sshd --follow

Cleanup logs

sudo journalctl --vacuum-size=1K